Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          YcHttnwZV9dUKcmvCoL8z8zhGLu25txugamNX49ZKAU=
Subject key identifier:   F3:29:CE:36:08:00:63:83:4D:49:8C:4E:71:D6:41:78:DF:7E:BE:87
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       019EC2925C37280AEE6165AFC27E6FDE6017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0DF0
Signing time:             Sat 13 Jun 2026 20:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:32 +0000
Files and hashes:         1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: LyVU5WgQ3VLORrViCBts/ot74vbuMDr/pv8zf38V+uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:5c:37:28:0a:ee:61:65:af:c2:7e:6f:de:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Jun 13 20:00:32 2026 GMT
            Not After : Jun 14 20:00:32 2026 GMT
        Subject: CN=f329ce36080063834d498c4e71d64178df7ebe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:66:e1:ae:cd:d1:75:e6:92:bb:0f:ef:a6:
                    41:02:94:36:f8:e5:1f:f0:cc:ff:77:01:dd:66:18:
                    bd:3c:94:fe:e9:04:ab:b8:8a:30:5b:b6:a1:1d:81:
                    ca:e2:7f:c4:90:05:86:3c:f0:19:c5:46:b8:ee:04:
                    64:dc:35:0d:f4:c9:da:25:52:eb:b6:bc:9c:49:b8:
                    6d:51:de:34:ce:d0:36:7a:c4:7d:d7:e5:df:f3:2a:
                    bb:64:b3:b7:d5:28:fa:a3:d2:31:13:97:ee:45:b6:
                    a8:9b:0a:90:ae:e0:a9:64:a0:13:56:9d:03:d0:6c:
                    36:b8:f8:4c:c7:da:1e:ad:65:8a:4c:85:8c:41:f6:
                    e1:d2:33:e2:c6:ea:c4:8f:f0:c0:03:df:04:0f:58:
                    6d:f5:cf:39:7b:3d:65:4b:48:c3:e9:4b:18:f9:58:
                    1e:02:e0:fe:36:b2:db:91:0b:ee:b1:10:bb:a3:5c:
                    c8:f9:c3:7e:8f:20:85:cc:f9:0a:26:3b:67:63:f7:
                    27:03:55:66:2a:2c:f1:1e:eb:90:52:a3:31:d8:93:
                    b6:af:7d:1d:4f:4c:f2:ce:f3:0c:31:47:10:54:d4:
                    ca:6a:cd:5f:30:58:6a:fc:ae:2d:11:93:08:cb:e1:
                    72:23:ff:f5:89:4f:8a:67:66:9a:dc:37:9a:cd:d1:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:CE:36:08:00:63:83:4D:49:8C:4E:71:D6:41:78:DF:7E:BE:87
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:ce:04:ff:cd:0b:ff:5d:fd:a7:d4:3f:d8:fc:7b:ba:da:
         d7:14:39:3a:b0:33:71:f6:3a:82:1e:b8:c0:8f:8d:c8:6e:5d:
         9a:af:8c:c9:3e:3b:0f:3c:b4:cb:59:91:86:c7:6e:3b:e6:4e:
         39:c0:54:b4:51:99:a8:fb:cc:7d:a1:49:10:d5:dd:15:e1:18:
         c1:5b:5f:bc:7e:30:ba:9e:e5:8b:11:c6:c6:00:5d:60:fc:38:
         29:e2:07:08:6c:9c:aa:67:e7:30:08:0e:37:01:7f:93:68:ec:
         fd:2f:4e:6a:e3:48:15:3c:ca:e8:4f:ff:b8:57:41:32:fd:4c:
         4e:37:57:9e:6b:7c:7b:f2:cd:59:14:b3:2b:5c:b8:0e:1d:43:
         d6:a0:05:41:08:78:df:cb:e9:23:7c:97:d9:e1:17:cf:c4:2b:
         2e:bd:ea:c6:83:d9:ef:1a:68:b2:f1:00:f6:3b:b3:20:5c:f8:
         5e:57:92:0a:28:0e:2a:58:98:65:8a:a3:91:83:93:da:0f:95:
         42:ed:3b:ca:44:6b:8f:00:13:e9:db:ba:21:10:84:93:e9:a7:
         a7:45:92:72:da:ff:1a:e9:d2:14:02:f3:6e:e9:dc:01:78:a3:
         13:4d:45:7d:d7:99:1e:e4:40:29:7c:09:b9:3c:ef:50:c1:fc:
         75:97:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:08 2026 by rpki-client